Critical Coldcard flaw: what happened, who is affected, and what to do